国家电网公司直属单位信息安全规划研究

国家电网公司直属单位与下属省电力公司的业务不同，关注的信息安全风险也不尽相同，其信息安全工作有自己的特点。文章以国家电网公司一直属金融单位为例，从信息安全管理体系、技术体系、运行体系3个方面详细叙述了该单位的信息安全规划及实施步骤。该规划既能满足国家电网公司和行业监管机构的信息安全要求，又能够防范金融企业信息系统面临的安全风险，对其他直属单位的信息安全工作有参考作用。

Study on Information Security Planning of Directly- affiliated Units of State Grid Corporation of China

The SGCC directly-affiliated units do not engage in power grid construction or operation, so the information security risks they are facing are different from the provincial power companies of SGCC. Taking the directly-affiliated unit A as an example, this paper describes its information security planning and implementation process in details from three aspects of information security management system, technology system and operation system. The planning can not only meet the needs of information security of SGCC and the industry regulators, but also prevent the information security risks of information systems for finical enterprises. Meanwhile the planning will provide a reference for information security works of other directly-affiliated units.